HTTP Headers Analysis for https://client.caremark.com

Detected Technologies from Headers

See all in URL Inspect 12

Akamai Active incidents

Bing

BootstrapCDN

Cloudflare

Cloudflare CDN

Font Awesome

Google DoubleClick

Google Tag Manager

jQuery

Qualtrics

Quantum Metric

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Basic

default-src; script-src; frame-src; +1 more Analyze

Content-Security-Policy-Report-Only

Basic

object-src; script-src; base-uri Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

interest-cohort=()

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache="set-cookie, set-cookie2"

Expires

Caching

Thu, 01 Dec 1994 16:00:00 GMT

cache-control: no-cache="set-cookie, set-cookie2"
expires: Thu, 01 Dec 1994 16:00:00 GMT

Content Headers

Content-Language

Content

en-US

Content-Length

Content

10756

Content-Type

Content

text/html;charset=ISO-8859-1

content-language: en-US
content-length: 10756
content-type: text/html;charset=ISO-8859-1

Server Headers

X-Powered-By

Server

Servlet/3.1

x-powered-by: Servlet/3.1

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: DINOISSESJ=0000Gh_qyR6fEuP5PweUloM75Zu:1iu5nh8mi; Path=/; Secure; HttpOnly;HttpOnly;Secure
_abck=CF6609DF7CB06D66E75A8541C4A56BE4~-1~YAAQ5sgwFw7NXPafAQAAwgMqLhDJLnmNBUYx0gXyHwust4R7OLigRom6B0iuibgt03MQGVtwQ/xz6m1F7/poyA8U9TC26j8L9V70DTArDc2ZzEE2shjD+t6WBsnCGhQAw/XS5oN6ipdlCemzlOQX2d3JyILp3diKnLH+xmeL82TvFzL9LPg+BdbAdlObUs6qhswsbTFs/AOI1PBHwgXb8/+6q1/7O+iU3ynMyvFQeCtnUooR5yfHJsQZLz14tGLE2nAmyTXsy+WrNC5N9pm+t37W3KLEi9BGtUK06agE3H6Jgshy2Y9+//4euLh4+Knyue+hKnm0XUeJ4xHW+lE3ej7N1ms3I4PvUKgnJibdbR3aCX24123d9S96H6dLeuCviNlftUddE434Ux3TFqI2JEGz4e0977rxFD2U3kv24b1SXPZLuKvUUcawazbzEQrPbkFnZxmxfw==~-1~-1~-1~-1~-1; Domain=.caremark.com; Path=/; Expires=Mon, 23 Aug 2027 10:28:20 GMT; Max-Age=31536000; Secure
bm_sz=3F1F4AD80AA538EAB6A9A1F744987627~YAAQ5sgwFw/NXPafAQAAwgMqLgB15IcKCydF4kQMHMRAjbGkwJozm78aK1qDhB6GwfTnPQPDFOFEbrT7xvKJVBxPABT1Wa38vte8nMPtBsg8Ae6EdMezENX/3VlhtOSkG63KYe5BmkVduu4rUMwKMfszlUd7SirwDVlpSBaOE9wyh61+uK/dp/E9WUjKfWQORUqFRJRPpIiDfvkP0+KoxhcFhQf5p+ydV0Jaf07MAO21gP//AkEf8fnX6nyeePWgbwVG518fO6L2P73nnhG5Xg3q7Tjx4MhMVccCTYe0NtCjojHlVTGCBOMzY4wkXXBOoEiqOfLrA3/HhK3TXl9Ge3o41j9m3nmal9+EGWU6fg==~4538932~4539457; Domain=.caremark.com; Path=/; Expires=Sun, 23 Aug 2026 14:28:20 GMT; Max-Age=14400

Other Headers

Cross-Origin-Embedder-Policy-Report-Only

Other

require-corp

Date

Other

Sun, 23 Aug 2026 10:28:20 GMT

P3p

Other

CP='CAO ADMo DEVo OUR IND PHY ONL PUR FIN COM NAV STA HEA GOV'

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=55, origin; dur=32, ak_p; desc="1787480900198_389073126_1803883769_9836_11948_15_158_-";dur=1

X-Akamai-Transformed

Other

9 2463 0 pmb=mRUM,1

X-Req

Other

a=allow;c=;d=desktop;g=0.e6c83017.1787480900.6b8514f9;h=client.caremark.com;i=23.48.200.230;l=unk;t=ut;u=brw

cross-origin-embedder-policy-report-only: require-corp
date: Sun, 23 Aug 2026 10:28:20 GMT
p3p: CP='CAO ADMo DEVo OUR IND PHY ONL PUR FIN COM NAV STA HEA GOV'
server-timing: cdn-cache; desc=MISS, edge; dur=55, origin; dur=32, ak_p; desc="1787480900198_389073126_1803883769_9836_11948_15_158_-";dur=1
x-akamai-transformed: 9 2463 0 pmb=mRUM,1
x-req: a=allow;c=;d=desktop;g=0.e6c83017.1787480900.6b8514f9;h=client.caremark.com;i=23.48.200.230;l=unk;t=ut;u=brw

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology